In the Linux kernel, the following vulnerability has been resolved:
sunrpc: fix null pointer dereference on zero-length checksum
In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that the value of checksum.len is not less than XDR_UNIT.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade perf6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-headersUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfo | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Nov 12, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-6.17Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-6.17Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-generic-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-awsUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-oem-6.17Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-gcp | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub